The sensor shows the process running as well.
I have a new allow rule that has logging enabled.
Still no data showing in the Connections. This had worked in the past. No changes were made. it just stopped working.
Thanks Again for your help
jerry
That was helpful. Thx
Here is what I have from DC:
root@Sourcefire3D:/Volume/home/admin# pmtool status |grep SFDataSFDataCorrelator (normal) - Running 6052Command: /usr/local/sf/bin/SFDataCorrelator --nodaemonPID File: /var/sf/run/SFDataCorrelator.pi...
Thx. I will try to complete your above idea. I am new to this product.
I do have this in the syslog:
Nov 19 2015 13:41:38 Sourcefire3D SF-IMS[31120]: [31240] SFDataCorrelator:MySQLEvent [ERROR] mysql_stmt_prepare failed: 1017: Can't find file: 'rna_f...